JWT Token Generator
Enter JSON objects and a shared secret to create a compact JWT in your browser with Web Crypto.
Signs locally with Web Crypto HMAC-SHA-256. The secret stays in this page memory and is never uploaded.
HS256 uses a shared secret. Do not use this page for production private keys or real credentials.
A QUICK WALKTHROUGH
How to use this tool
- Enter header and payload JSON objects.
- Enter a shared HMAC secret; it stays local.
- Generate and review the compact JWT before copying it.
Browser-only HS256 signing
Signing uses the Web Crypto API and never sends the secret or token to a server.
Shared-secret boundary
HS256 is symmetric: anyone who verifies with the secret can also sign. Use trusted application code and proper secret management for production.
GOOD TO KNOW
Common questions
Which algorithm is supported?
Only HS256, using the browser Web Crypto API.
Is my secret uploaded?
No. It remains in page memory and is not stored or transmitted.
Can this create RS256 or ES256 tokens?
No. This focused tool does not accept private keys or implement asymmetric signing.